The flaw lies in the exec function of the Rapids setproperty primitive handler in h2oAI's h2o-3 engine. It allows an attacker to manipulate property-setting behavior, bypassing the intended access controls. This can enable unauthorized modification of system properties or configuration, potentially leading to unauthorized actions or privilege escalation.

Vendor h2oAI and product h2o-3 are affected. Any instance of h2o-3 with a version equal to or lower than 7402 is vulnerable. No additional versions are specified.

The CVSS score of 6.9 indicates moderate severity. An EPSS score of < 1% suggests a very low likelihood of exploitation in the general population, though the vulnerability remains publicly exploitable. The issue is not listed in CISA KEV. Remote attackers can exploit the flaw, potentially altering system properties to gain elevated privileges or compromise integrity, especially in environments exposed to untrusted networks.